Gustin Johnson wrote: > Ralf Mardorf wrote: > >> Hi :) >> >> /usr/share/doc/lilypond/html/Documentation/user/baer-flat-gray.pdf from >> the 64 Studio 3.0-beta3 install was detected as malware. >> >> > You might want to upload the suspected file to: > http://www.virustotal.com/ > > These results are probably more useful to the AV firm anyway. >
Hi Gustin :) it is a false positive detection of the software I used and they will remove it from the virus definition file. I had troubles because of too many spam, Thunderbird doesn't pick out spam at the moment and so I accidentally picked out some good mails, while I marked the undetected spam manually. To keep it short and simple, I deleted the messages were the file was attached too and I don't have it any more. I wasn't able to recover the mails. Until now they're still hidden in the Trash folder, but I'll compact folders in the next hour. I remember that I recovered mails by changing 'X-Mozilla-Status' or 'X-Mozilla-Status2' but it didn't work now, resp. I guess I need to do this and than to copy'n'paste them to the folder were they are from, anyway, with gedit I found an answer from the software vendor and I copied into this mail. I don't know if it's interesting for http://www.virustotal.com/ too, because it is a false positive detection of the software I'm using, see below. Cheers, Ralf From - Tue May 19 12:46:59 2009 X-Account-Key: account2 X-UIDL: AAQlJvnAAAArUC5XWNwJN60yLSfGDQSt X-Mozilla-Status: [snip] X-Mozilla-Status2: [snip] X-Mozilla-Keys: [snip] To: [email protected] Subject: Avira Lab Response - Tracking number 311830 Date: Tue, 19 May 2009 09:00:07 +0200 From: Avira Virus Lab Response Team <[email protected]> Message-ID: <[email protected]> X-Priority: 3 X-Mailer: PHPMailer [version 1.73] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_d37f86d45fc75b8713572102cb1febb2" Return-Path: [email protected] X-OriginalArrivalTime: 19 May 2009 07:00:07.0737 (UTC) FILETIME=[71A42A90:01C9D84F] --b1_d37f86d45fc75b8713572102cb1febb2 Content-Type: text/plain; charset = "ISO-8859-1" Content-Transfer-Encoding: 8bit Dear Sir or Madam, Thank you for your email to Avira's virus lab. Tracking number: INC00311830. We received the following archive files: File ID Filename Size (Byte) Result 25351304 PASSWORD_IS_infected.7z 61.94 KB OK A listing of files contained inside archives alongside their results can be found below: File ID Filename Size (Byte) Result 25351305 baer-flat-gray.pdf 63.4 KB FALSE POSITIVE Please find a detailed report concerning each individual sample below: Filename Result baer-flat-gray.pdf FALSE POSITIVE The file 'baer-flat-gray.pdf' has been determined to be 'FALSE POSITIVE'.In particular this means that this file is not malicious but a false alarm.Detection will be removed from our virus definition file (VDF) with one of the next updates. Alternatively you can see the analysis result here: http://analysis.avira.com/samples/details.php?uniqueid=bgzxHvbGmMHOLk7r4pV2Pv8Zq7Pxk7tc&incidentid=311830 An overview of all your submissions can be found here: http://analysis.avira.com/samples/details.php?uniqueid=bgzxHvbGmMHOLk7r4pV2Pv8Zq7Pxk7tc We recommend to use our upload form for further submissions. In case the result is known it will be shown in realtime to you. Furthermore files which are considered to be false positive suspictions can only be submitted using this method. http://analysis.avira.com/samples/index.php?lang=en Please note: If you have specific questions please address them to [email protected] Kind regards Avira Virus Lab --------------------------------------------- Avira GmbH Lindauer Str. 21, D-88069 Tettnang, Germany Phone: +49 (0) 7542-500 0 Fax: +49 (0) 7542-525 10 Internet: http://www.avira.com CEO: Tjark Auerbach Headquarter: Tettnang Commercial register: AG Ulm HRB 630992 --------------------------------------------- [snip] _______________________________________________ 64studio-users mailing list [email protected] http://lists.64studio.com/mailman/listinfo/64studio-users
